Search results

  1. P

    Watchdata EMV chips in R6, G0 and other cameras

    Ah, but see, I'm still looking for that little lever way in. The NAND flash reader is on order.
  2. P

    Watchdata EMV chips in R6, G0 and other cameras

    I figured all the easy approaches would have been taken already. *sigh* -very irritated at this product for being mis-advertised.
  3. P

    Watchdata EMV chips in R6, G0 and other cameras

    @rearanger and @alastairstevenson - do either of you have a recommended smart card reader I can use with a standard SOIC-8 clip to hook into these? Or am I going to be bodging wires around again? And I suppose of course the software package since the dumper isn't going to work.
  4. P

    Anyone got the G1 ambarella s3l IP Camera SoC SDK

    Do you have any idea if it's possible to bit bang data out of a nand chip still soldered in? I really hate to go out and buy the socket, the ftdi (and trying to find a legit one), etc... I wonder if I can get a scope on the traces and watch the data getting loaded. Hrmmm...
  5. P

    Hikvision G1 5.5+ firmware Exploring the Cam & attempting unlock

    Interesting if the underlying structure is similar enough to run on my mystery cam. I think I'm gonna pull up the soldering gun... So white and nerdy.
  6. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Commands that say "erase" or "format" always make me nervous. So obviously given your warnings this is going to be more difficult than the other embedded hardware I've worked with. Oddly enough I was assuming there were resistors or whatnot that hardware locked the camera like they do or did on...
  7. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Apparently "Help" doesn't get you what you need... # setV6ip Commands Usage help : Printf the command usage list getIp : Get the device's IP address setIp : Set the device's IP address. Usage: setIp [IP ADDRESS]:[SUBNET MASK] e.g. setIp...
  8. P

    Unable to access HikVision camera via browser

    No web interface for DS-2CV2Q21FD-IW
  9. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    edit: Well DUH. It says... u-boot_g1.bin . If I could only figure out what type of camera it is... I should go to bed I'm so friggin slow. Got a cheap g1 uboot for a bum? You're being an incredible help just as it is. When you can only focus 30 minute snippets on things to get it working, it's...
  10. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    That's OK- I want to upgrade the NVR too. Since they were selling the package for 700$ (discounted to 200$) I didn't imagine it was that 'dumb' of a system- and sheesh, did they. Does it look like any of the other cam chip series?
  11. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Bit of fun- found this on the custom project, converted it to 'pretty', and... 北美萤石4K相机低成本方案定制 which links back to ... ezviz "fluorite" products.
  12. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Wait, where's that firmware from? The one on the web I saw was for the NVR (referencing the 3535). Did you find something else??? And yeah, the cramfs is right there in front of me- but again the one I grabbed off of hikvision's site appears to be for the NVR. Or is that really for the camera...
  13. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    The uboot I have are: I actually was wondering if I should get one of the cheap go-pro knockoffs as a way to get access to the chips. Then at least I could program with an soic 8 clip :) edit: There's also pads for a micro-sd card. I haven't taken the time to see if I have a spare slot from...
  14. P

    Hikvision G1 5.5+ firmware Exploring the Cam & attempting unlock

    I don't have any published firmware for the camera I'm looking at- Ambarella S5 'olive' board I believe. The mini-shell you, @rearanger , have was setup for G cameras, on S3. Do you know if or have you come across any S5 boot logs to help me narrow down what this hardware revision is? I'm...
  15. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Is there any Ambarella S3L development boards? Something with a cheap flash that I could try pushing firmware onto ? Just some neat things I found. I particularly like the copy of the files skipping one byte... taskParamCtrl cd /home/app; tar -zcvf cfg.tgz cfg dd if=/home/app/cfg.tgz...
  16. P

    EZViz NVR setup without a monitor

    @Pathogen , can you screen shot that for me? I've got no options- unless I"m just not seeing them (which, given my level of frustration, is entirely possible). Thank you!
  17. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Getting used to these tools- sadly the nvr unpacking seems to abort, but not before i got to see this: penwrt@openwrt-VirtualBox:/tmp/home/app/hisi/modules$ ls acodec.ko hi3535_chnl.ko hi3535_sys.ko hidmac.ko clkcfg_hi3535.sh hi3535_h264e.ko hi3535_tde.ko hifb.ko...
  18. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    edit: Hey- I see you're the only hit for this: Which microchips/processors does HikVision use in its cameras? Ambarella S3L Olive Board Full up dbg 8 dmesg log. dmesg [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 3.10.104 (mengxiang@Cpl-Frt-BSP) (gcc version...
  19. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    I always get in trouble for not defining the problem statement. I can't use the Cameras for anything other than viewing, unless I have the NVR in. I can't do much with the NVR, either. Thus: Find out what camera it is, put firmware on it to do what it should. enable web if it's there. I can...
  20. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    The SDK port is 8000, presumably that I could use to communicate on. # showUpnp External IP: 0.0.0.0 CMD port: 9010, mapped port: 0 STREAM port: 9020, mapped port: 0 HTTP port: 80, mapped port: 0 RTSP port: 554, mapped port: 0 SDK port: 8000, mapped port: 0
  21. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Yep, I've done quite a bit of probing using nmap. I was even going to break out metasploit .... but my firewall and antivirus got really pissy about it. I have no idea if the 7513 fingerprint is accurate or not. The NVR has a challenge/response with salt. The camera continues to boot right...
  22. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    # prtHardInfo Start at 2019-08-11 15:55:00 Serial NO :CS-CV110-A1-68R20180304AAWR181184768 V5.5.3 build 180122 OEM INFO: DZ20171013_100 NetProcess Version: 5.10.2 [20:30:31-Jul 18 2017] Path: /Camera/Platform/Trunk/FSP_network_protocol Last Changed Rev: 299284 Last Changed Date: 2017-07-14...
  23. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    dmesg info: # dmesg [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 3.10.104 (mengxiang@Cpl-Frt-BSP) (gcc version 5.2.1 20151005 (Linaro GCC 5.2-2015.11-2) ) #1 PREEMPT Fri Sep 29 19:32:52 CST 2017 [ 0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7)...
  24. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Boot Log: U-Boot 3.1.6-297597 (Aug 30 2017-21:48:30) boards:310094 Boot From: NAND 2048 RC BCH 6bit SYS_CONFIG: 0x00070053 POC: 001 Cortex freq: 816000000 ENET freq: 50000000 iDSP freq: 348000000 Dram freq: 840000000 Core freq: 360000000 AHB freq: 180000000 APB freq: 90000000 UART freq...
  25. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    Photos of the teardown:
  26. P

    EZViz Camera: CS-CV110-A1, photos, passwords...

    It's been a bit frustrating but here is the EZViz camera that is causing me so much grief. First, unless you read the FAQ, buried way in the back is the statement "No Web- secure only" and "Only compatible with the ezviz NVR". What that means is there is NO webservices, no SSH, no nothing...
  27. P

    Hikvision DS-7608N-E2/8P Firmware Upgrade Possible?

    @alastairstevenson I truly amd sorry to bother you on this- these instructions- are they expandable to dump the firmware from my 'unknown' camera? I'm into the serial console port after disassembling it, and am putting toghet a list of commands and items from dmesg. It looks like (however)...
  28. P

    Decompiling Hikvision firmware (9000 series) digicap.mav

    @alastairstevenson - I tried following line by line your example there, and I finally get it to work. Thank you. When I tried to pull apart my firmware for my NVR (the problematic one) I'll get: openwrt@openwrt-VirtualBox:~/firmware/EZVIZNVR$ ../hikpack-2.5 -t k41 -i digicap.dav Magic ...
  29. P

    Hikvision PCB DS-803015 - What NVR?

    @alastairstevenson , @montecrypto, @rearanger anyone else you could point me to that might have photos of cameras and NVR pcbs ?
  30. P

    Hikvision PCB DS-803015 - What NVR?

    The EZViz NVR I bought as a set with 4x 4k cameras (none of which are running a webserver) has a PCB mark on it saying it's the DS-803015, Rev 1.0. I've been scraping as much web as I can to find it, but I can't find a single NVR photo of this board. I doubt it's new- it's just figuring out...
Top Bottom